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Disposition of Claims 
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DETAILED ACTION 



1. 



This office action is in response to the amendment filed on 03/27/2007 



2. 



Claims 1, 20, and 30 have been amended. 



3. 



Claims 1-30 are pending. 



Response to Arguments 



4, Applicant's arguments with respect to claims rejection have been considered but 
are moot in view of the new grounds of rejection. See Chan US 2004/0255273 A1 
made of record below. 



5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-30 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Saxe et al. US 6,477,702 (hereinafter Saxe) in view of Chan US 2004/0255273 A1 
(hereinafter Chan). 

Claim 1: 

Saxe disclose a method for analyzing software code (see for example FIG. 1 , and 
related text) comprising the steps of: 



Claim Rejections - 35 USC § 103 
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a) automatically generating program graphs representing said code utilizing static 
analysis techniques (see for example column 6, lines 38-44, FIGs. 1 & 13, and related 
text); 

c) automatically identifying potential software problems from rules set analysis results 
(see for example column 6, lines 61-65, FIG. 2, and related text); and, 

d) reporting said software problems where one or more of best practices violations and 
coding errors may occur control and data flow analysis (see for example column 6, lines 
61-67, FIG. 2, step 205, and related text). 

Although Saxe discloses a method for automatically applying a set o f rules to 
said program flow analysis graphs (see for .example column 6, lines 53-60, FIG. 2, and 
related text), Saxe fails to disclose a method for analyzing software code where: 

b) automatically applying a set of rules to said program flow analysis graphs, including 
at least performing a reachability analysis for at least removing one or more edges to 
reduce reachability. 

However, Chan in the same analogous art of program optimization discloses a 
method for analyzing software code where: 

b) automatically applying a set of rules to said program flow analysis graphs, including 
at least performing a reachability analysis for at least removing one or more edges to 
reduce reachability (see for example, FIG. 4, blocks 404, 408, and associated text, e.g. 
page 4, [0057], lines 1-15). 

Therefore, at the time the invention was made it would have been obvious to a 
person of ordinary skill in the art to modify the teachings of Saxe to include a method as 
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taught above in Chan so as to optimize the program since fewer resources are used in 
memory (see for example Chan, page 4, [0057]). 
Claim 2: 

Saxe further discloses the method according to Claim 1, wherein said rules set 
represents one or more selected from the group comprising: use of best practices and 
common coding errors, or combinations thereof (see for example column 7, lines 27-45, 
FIG. 2, item 220, and related text). 
Claims: 

Saxe further discloses the method according to Claim 1, wherein said reporting d) 
includes presenting the results in the context of corresponding source code or object 
code (see for example FIG. 2, item 205, 209, 210, and related text). 
Claim 4: 

Saxe further discloses the method according to Claim 1, wherein step b) includes 
performing rule searches applied to said program graphs (see for example column 7, 
lines 1-18). 
Claim 5: 

Saxe further discloses the method according to Claim 1 , wherein said software code 
subject to said static analysis techniques comprises one or more selected from the 
group comprising: object code, source code, a compiler intermediate representation, of 
said software code, and other program representations, or combinations thereof (see for 
example FIG. 1, item 110, and related text). 
Claim 6: 
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Saxe further discloses the method according to Claim 3; wherein a program graph 
includes a control analysis graph, said static analysis technique automatically 
generating said control analysis graphs from said software code (see for example FIGs 
7 & 8, and related text). 
Claim 7: 

Saxe further discloses the method according to Claim 3, wherein a program graph 
includes a data flow analysis graph, said static analysis technique automatically 
generating said data flow analysis graph from said software code (see for example FIGs 
7 & 8, and related text). 
Claim 8: 

Saxe further discloses the method according to Claim 3, wherein a program graph 
includes an intraprocedural control graph (see for example column 10, lines 30-50), said 
static analysis technique automatically generating said intraprocedural control graphs 
from said software code. 
Claim 9: 

Saxe.further discloses the method according to Claim 3, wherein a program graph 
includes an interprocedural control graphs, said static analysis technique includes 
automatically generating said interprocedural control graphs from said software code 
(see for example column 10, lines 30-50). 
Claim 10: 

Saxe further discloses the method according to Claim 5 wherein said static code 
analysis further includes automatically identifying classes, fields, methods and class 
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attributes, said set of rules being further applied to said classes and class attributes 
(see for example FIG. 2, item 202, and related text). 
Claim 11: 

Saxe further discloses the method according to Claim 5 wherein said static code 
analysis further includes automatically identifying attributes of classes, methods, fields, 
and aspects of a programs body (see for example FIG. 2, item 202, and related text). 
Claim 12: 

Saxe further discloses the method according to Claim 5, wherein said step b) further 
includes the step of: receiving said program graphs and class attributes information and 
performing a graph rewriting technique (see for example FIG. 13, step 1304, and related 
text). 

Claim 13: 

Saxe further discloses the method according to Claim 12, wherein a result of applying 
graph rewriting includes generating a run-time characteristics model for said program 
(see for example column 7, lines 27-37). 
Claim 14: 

Saxe further discloses the method according to Claim 12, wherein said step b) further 
includes the step of receiving said program graphs and attributes information, and 
performing a reachability analysis (see for example column 11, lines 10-17). 
Claim 15: 
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Saxe further discloses the method according to Claim 14, wherein said reachability 
analysis is performed with or without constraints (see for example column 11, lines 10- 
17). 

Cliaim 16: 

Saxe further discloses the method according to Claim 14, further comprising the step of 
employing a rule search engine (see for example FIG. 2, items 204,220, and related 
text) to automatically apply a set of rules (see for example FIG. 2, item 220, and related 
text) to said rewrite graph results, teachability analysis results and attributes to identify 
one or more selected from the group of: possible performance errors or problems 
concerning correctness, security, privacy and maintainability of said software code (see 
for example column 6, lines 5-21). 
Claim 17: 

Saxe further discloses the method according to Claim 14, wherein said rewrite graph 
technique includes traversing a program graph to locate nodes containing attributes of 
interest and to locate edges to add or remove from said program graph (see for 
example column 11, lines 52-60, FIG. 12, and related text). 
Claim 18: 

Saxe further discloses the method according to Claim 17, wherein said reachability 
analysis includes traversing the program graphs and adding or removing edges to 
extend or reduce reachability, respectively (see for example column 1 1 , lines 52-60). 
Claim 19: 
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Saxe further discloses the method according to Claim 18, wherein a rule is applied to 
determine whether a node representing a particular method is reachable by traversing 
said graph from a particular head node, said head node being user selectable (see for 
example FIG. 13, and related text). 
Claim 20: 

Saxe discloses a static analysis framework for analyzing software code said framework 
comprising: 

* 

rule search engine for automatically applying a set of rules to said program graphs (see 
for example column 6, lines 53-60, FIG. 2, item 220, and related text)); 
means for automatically identifying potential software problems from rules set analysis 
result (see for example column 6, lines 61-65); and, 

means for reporting said problems to enable correction of instances where one or more 
of best practices violations and common coding errors may occur (see for example FIG. 
2, item 205, and related text). 

Although Saxe discloses a method for automatically applying a set of rules to 
said program flow analysis graphs (see for example column 6, lines 53-60, FIG. 2, and 
related text), Saxe does not disclose a static analysis framework comprising: means for 
automatically generating program graphs, including at least performing a reachability 
analysis for at least removing one or more edges to reduce reachability. 

However, Chan in the same analogous art of program optimization discloses 
astatic analysis framework comprising: means for automatically generating program 
graphs, including at least performing a reachability analysis for at least removing one or 



Application/Control Number: 10/620.078 Page 9 

Art Unit: 2192 

more edges to reduce reachability (see for example, FIG. 4. blocks 404, 408, and 
associated text, e.g. page 4, [0057], lines 1-15). 

Therefore, at the time the invention was made it would have been obvious to a 
person of ordinary skill in the art to modify the teachings of Saxe to include a method as 
taught above in Chan so as to optimize the program since fewer resources are used in 
memory (see for example Chan, page 4, [0057]). 
Claim 21: 

Saxe further discloses the static analysis framework as claimed in Claim 20, wherein 
said rules set represents one or more selected from the group comprising: use of best 
practices and common coding errors, or combinations thereof (see for example column 
7, lines 27-45). 
Claim 22: 

Saxe further discloses the static analysis framework as claimed in Claim 20, wherein 
said software code comprises scalable componentized applications according to a 
software development platform (see for example FIG. 1, item 120, FIG. 2, item 220, and 
related text). 
Claim 23: 

Saxe further discloses the static analysis framework as claimed in Claim 18, wherein 
said program graphs include one or more selected from the group comprising: a control 
analysis graph, a data flow analysis graph (see for example FIGs! 7 & 8, and related 
text), an intraprocedural control flow graph and an inteprocedural control flow graph, 
said static analysis technique automatically generating a respective one of said control 
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analysis graph, data flow analysis graph, intraprocedural control flow graph and 
inteprocedural control flow graph from said software code (see for example column 6, 
lines 38-44). 
Claim 24: 

Saxe further discloses the static analysis framework as claimed in Claim 23, further 
including means for automatically identifying classes, fields, methods and class 
attributes, said set of rules being further applied to said classes and class attributes 
(see for example FIG. 2, item 202, and related text). 
Claim 25: 

Saxe further discloses the static analysis framework as claimed in Claim 23, wherein 
said static code analysis further includes automatically identifying attributes of classes, 
methods, fields, and aspects of a program's body (see for example FIG. 2, item 202, 
and related text). 
Claim 26: 

Saxe further discloses the static analysis framework as claimed in Claim 20, wherein 
said means for automatically generating program graphs includes means for performing 
graph rewriting (see for example FIG. 13, step 1304, and related text). 
Claim 27: 

Saxe further discloses the static analysis framework as claimed in Claim 26, wherein 
results of said graph rewriting include a run-time characteristics model for said program 
(see for example column 7, lines 27-37). 
Claim 28: 



Application/Control Number: 10/620,078 Page 11 

Art Unit: 2192 

Saxe further discloses the static analysis framework as claimed in Claim 26, wherein 
said means for automatically generating program graphs includes: means for 
performing a teachability analysis, said reachability analysis being performed with or 
without constraints (see for example column 1 1 , lines 1 0-1 7). 
Claim 29: 

Saxe further discloses the static analysis framework as claimed in Claim 28, wherein 
said rule search engine automatically applies a set of rules to said rewrite graph results, 
reachability analysis results and attributes to identify one or more of: possible 
performance errors or problems concerning correctness, security and privacy of said 
software code (see for example column 6, lines 5-21). 
Claim 30: 

Claim 30 is a computer program device readable by a machine version of the claimed 
method step discussed in claim above, wherein all claim limitations have been 
addressed and/or covered in cited areas as set forth above. Thus, accordingly, these 
claims are also anticipated by Saxe and Chan. 

Conclusion 

6. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry of a general nature of relating to the status of this application or 
proceeding should be directed tot eh TC 2100 Group receptionist whose telephone 
number is (571) 272 2100. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov . Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll free). 
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